Student projects: Difference between revisions
Jump to navigation
Jump to search
Paul Wouters (talk | contribs) No edit summary |
Paul Wouters (talk | contribs) No edit summary |
||
Line 10: | Line 10: | ||
* Project page: [[ RSA-PSS Support in compliance with RFC 7427 and RFC 8247]] | * Project page: [[ RSA-PSS Support in compliance with RFC 7427 and RFC 8247]] | ||
* Status : Merged and released in Libreswan 3.25 | * Status : Merged and released in Libreswan 3.25 | ||
= Extend RFC 7427 Signature Authentication support to IKEv2 with ECDSA = | = Extend RFC 7427 Signature Authentication support to IKEv2 with ECDSA = | ||
Line 21: | Line 16: | ||
* Project page: [[ Extend RFC-7427 Signature Authentication support to IKEv2 with ECDSA]] | * Project page: [[ Extend RFC-7427 Signature Authentication support to IKEv2 with ECDSA]] | ||
* Status : Merged and released in libreswan 3.27 | * Status : Merged and released in libreswan 3.27 | ||
= RFC 5685 IKEv2 Redirect Mechanism = | = RFC 5685 IKEv2 Redirect Mechanism = | ||
Line 37: | Line 22: | ||
* Project Page: [[ RFC 5685 - Redirect Mechanism ]] | * Project Page: [[ RFC 5685 - Redirect Mechanism ]] | ||
* Status: Merged and released in libreswan 3.28 | * Status: Merged and released in libreswan 3.28 | ||
= Libreswan Managing Interface = | = Libreswan Managing Interface = | ||
Line 61: | Line 39: | ||
* Status: Initial framework implemented to support RSA v1.5 with SHA-1 signatures and RSA-PKK with SHA-2 signatures | * Status: Initial framework implemented to support RSA v1.5 with SHA-1 signatures and RSA-PKK with SHA-2 signatures | ||
* Code: Merged and released in libreswan 3.22, extended for authby=rsa-sha2 and RSA-PKK in 3.23 | * Code: Merged and released in libreswan 3.22, extended for authby=rsa-sha2 and RSA-PKK in 3.23 | ||
= RFC 8229 TCP Encapsulation of IKE and IPsec Packets = | = RFC 8229 TCP Encapsulation of IKE and IPsec Packets = | ||
Line 73: | Line 45: | ||
* Project Page: [[ GSOC 2017: Implementing RFC 8229 "TCP Encapsulation of IKE and IPsec Packets" for Libreswan ]] | * Project Page: [[ GSOC 2017: Implementing RFC 8229 "TCP Encapsulation of IKE and IPsec Packets" for Libreswan ]] | ||
* Status: Waiting on Linux kernel support for ESPinTCP. IKEinTCP code has been implemented in libreswan | * Status: Waiting on Linux kernel support for ESPinTCP. IKEinTCP code has been implemented in libreswan | ||
= draft-ietf-ipsecme-qr-ikev2 Postquantum Preshared Keys for IKEv2 = | = draft-ietf-ipsecme-qr-ikev2 Postquantum Preshared Keys for IKEv2 = |
Revision as of 04:59, 25 January 2019
Introduction
The Libreswan Project invites students to work on the libreswan code base. It offers mentoring for students. Please contact Paul Wouters if you are a student or school that is interested. For ideas of items to work on, please see GSoC
Below is a list of completed student projects. If you are interesting in participating as a student, please contact us.
RSA-PSS Support in compliance with RFC 7427 and RFC 8247
- Student: Sahana Prasad - sponsored by Google summer of code 2018
- Project page: RSA-PSS Support in compliance with RFC 7427 and RFC 8247
- Status : Merged and released in Libreswan 3.25
Extend RFC 7427 Signature Authentication support to IKEv2 with ECDSA
- Student: Sahana Prasad - sponsored by Google Summer of Code 2018
- Project page: Extend RFC-7427 Signature Authentication support to IKEv2 with ECDSA
- Status : Merged and released in libreswan 3.27
RFC 5685 IKEv2 Redirect Mechanism
- Student: Vukasin Karadzic - sponsored by Google Summer of Code 2018
- Project Page: RFC 5685 - Redirect Mechanism
- Status: Merged and released in libreswan 3.28
Libreswan Managing Interface
- Student: Rishabh Chaudhary - sponsored by Google Summer of Code 2018
- Project page: Libreswan Managing Interface
- Status: Development complete, waiting for release
Code and Testing commits
RFC 7427 Signature Authentication in the Internet Key Exchange Version 2 (IKEv2)
- Student: Sahana Prasad - sponsored by Google Summer of Code 2017
- Project page: Compliance of RFC 7427 - Signature Authentication in IKEv2
- Status: Initial framework implemented to support RSA v1.5 with SHA-1 signatures and RSA-PKK with SHA-2 signatures
- Code: Merged and released in libreswan 3.22, extended for authby=rsa-sha2 and RSA-PKK in 3.23
RFC 8229 TCP Encapsulation of IKE and IPsec Packets
- Student: Mayank Totale - sponsored by Google Summer of Code 2017
- Project Page: GSOC 2017: Implementing RFC 8229 "TCP Encapsulation of IKE and IPsec Packets" for Libreswan
- Status: Waiting on Linux kernel support for ESPinTCP. IKEinTCP code has been implemented in libreswan
- Student: Vukasin Karadzic - sponsored by The Libreswan Project in 2017
- Project Page: Postquantum Preshared Keys
- Status: Passed vendor interop testing
- Code: Merged and released in libreswan 3.23